Senior Privacy Biostatistician - Risk Analytics

Truveta • Seattle, WA

1d • Remote

About The Position

Truveta is seeking a senior statistical privacy expert to independently lead disclosure risk strategy for complex health data, including structured data, imaging, clinical notes, and emerging modalities such as genomic data. The role is based at the company’s headquarters in the Greater Seattle area and is designated #LI-remote. The Sr. Privacy Biostatistician reports to the Senior Director of Risk Analytics and leads statistical disclosure control strategy for high-visibility and novel-modality data products. Where individually qualified, the role signs Expert Determinations under 45 CFR §164.514(b)(1), documenting the basis for a finding that re-identification risk is “very small” to a standard that can withstand audit. Signing authority is based on demonstrated, documented judgment, expertise, and experience rather than a professional license or certification.

The role owns profile-level risk justification methodology and partners with clinical informatics, Legal, security leadership, and other teams to assess modality-specific risks and account for relevant security and regulatory considerations. It also mentors Privacy Biostatisticians developing toward independent signing authority, supports co-signing and case-history documentation, and works to improve data utility and usability while managing residual risk and mitigating controls.

The position requires a master’s degree in biostatistics, statistics, epidemiology, or a related quantitative field, with a PhD considered a plus. Candidates should have at least six years of experience applying statistical methods to patient health information, including significant hands-on statistical disclosure control experience, or equivalent competency demonstrated through a compressed, documented track record. Applicants should have documented de-identification experience with real datasets, experience with at least one non-structured modality in addition to structured EHR or claims data, and the ability to reason across HIPAA Privacy Rule and Security Rule considerations. Strong written and verbal communication and mentoring skills are also required.

Requirements

• Master’s degree in biostatistics, statistics, epidemiology, or a related quantitative field; a PhD is a plus.
• At least 6 years of experience applying statistical methods to patient health information, including significant hands-on statistical disclosure control experience, or demonstrated equivalent competency through an accelerated, documented case history.
• Demonstrated, documentable track record applying de-identification methodology to real datasets.
• Deep experience with at least one non-structured data modality, such as imaging or clinical notes, in addition to structured EHR or claims data.
• Demonstrated ability to reason across the HIPAA Privacy Rule and Security Rule boundary when estimating risk.
• Excellent written and verbal communication skills, including the ability to produce documentation that stands alone under audit.
• Demonstrated ability to mentor junior technical staff.
• Applicants must be authorized to work in the United States for any employer; Truveta cannot sponsor work visas or permits.

Nice To Haves

• Prior formal Expert Determination signing experience, internally or as an external consultant or expert witness.
• Experience analyzing risk across linked data modalities.
• Experience with process Expert Determinations.
• Hands-on experience with statistical disclosure control tools such as sdcMicro and with dynamic or continuously revalidated risk methodologies.
• Working familiarity with clinical informatics standards, including HL7, FHIR, and DICOM PS3.15 Annex E.
• Exposure to genomic data privacy considerations, such as VCF-level re-identification risk and familial risk.
• Experience analyzing Real World Data in a research setting.
• Evidence of participation in publications, studies, or reports.
• PhD in a related field.

Responsibilities

• Independently design and lead statistical disclosure control strategies for complex, high-dimensional, and multimodality health datasets, including structured data, imaging, clinical notes, and emerging modalities such as genomic data.
• Serve as a signing Expert Determiner when qualified, applying generally accepted statistical and scientific principles to assess whether re-identification risk is very small and documenting the reasoning to an audit-ready standard.
• Own profile-level risk justification methodology, including dynamic k-anonymity thresholds, quasi-identifier importance ranking, suppression hierarchies, and drift-triggered re-determination thresholds.
• Partner with clinical informatics and other teams on modality-specific risk, and with Legal on emerging modalities such as genomic data.
• Incorporate Truveta’s HIPAA Security Rule posture into Privacy Rule risk determinations and partner with security leadership on infrastructure and regulatory change.
• Mentor and supervise Privacy Biostatisticians working toward independent signing authority, co-sign their work, and maintain documentation of their case history.
• Partner with Legal and Contracts on supplementary recipient-side controls for higher-residual-risk modalities and incorporate these controls into determinations, while emphasizing that controls do not substitute for a statistical very-small-risk determination.
• Drive continual improvements in data utility and usability while managing residual risk and mitigating controls across the platform.

Benefits

• Comprehensive benefits package with medical, dental, and vision insurance plans.
• 401K plan.
• Professional development and training opportunities for continuous learning.
• Flexible work hours and flexible paid time off.
• Generous parental leave.
• Regular virtual and in-person team activities.
• Certain roles are eligible for additional compensation such as incentive pay and stock options.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior